Privacy notice
Last updated: 25 October 2026
Nutrition Counts is a nutrition app for iPhone and Android. This notice explains what information we collect, why, and the choices you have. We've written it to be read, not just agreed to.
In short
- You can scan and search foods without an account.
- If you create an account, we store your plan, diary, exercise, body measurements and shopping list so they're safe and in sync across your phones. Only you can see them.
- We never sell your data, and we never use your diary, measurements or health data to target ads.
- Barcode scanning happens on your phone. A photo only leaves your phone when you use a feature that needs it - like snapping a meal - or turn on meal photo backup.
- You can export or permanently delete your account and data at any time from inside the app.
Who we are
Nutrition Counts is run by Success Solutions Ltd, a company registered in England and Wales (company number 09734776), 27 Old Gloucester Street, London WC1N 3AX. We are the "controller" of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018). We are registered with the Information Commissioner's Office (registration ZC270698).
Contact us about privacy at privacy@nutritioncounts.com.
What we collect and why
| Information | Why we use it | Legal basis |
|---|---|---|
| Barcodes you scan and foods you search for | To show you the product and its score. Barcodes are looked up in our own product database and in Open Food Facts, a free public database (see "Who we share with"). Your scan history is kept on your phone. | Legitimate interests (providing the feature you asked for) |
| Account details: email address, username, avatar, year of birth | To create and secure your account (we email you a sign-in code, or you can use Sign in with Apple or Sign in with Google - there are no passwords), to show your username and avatar with things you add, and to apply age-appropriate settings. If you sign in with Apple or Google, they confirm it's you and share your email address (with Apple, this can be a private relay address that hides your real one); we don't keep the name they share. | Contract (providing your account) |
| Your plan and body measurements: sex, age, height, weight, body fat (optional), activity level, goals | To calculate your daily targets and goal date, and to show your progress. | Your explicit consent (this can reveal information about your health) |
| Your food diary, exercise, water, shopping list and kitchen list (and, only if you use them, your GLP-1 medicine dose log, your daily mood, energy and notes, hunger and fullness notes on meals, the swaps and challenges you choose, and blood pressure and blood glucose readings you type in) | To track your day against your targets, show the quality of your calories and keep your list. The optional logs are only for you to keep track: we show blood pressure against the NHS ranges for information, never give medical advice or a diagnosis, and never share these logs or use them for advertising. | Your explicit consent (this can reveal information about your health) |
| Products you add and checks you make | To build a shared database that helps everyone, and to award points and badges. Products you add are shared with all users. | Legitimate interests (a better product database for everyone) |
| Your country and units (from your phone's region setting, or what you choose in the app, plus your approximate country from your internet connection for ads) | To put your country's foods first, suggest swaps sold where you live, show your usual units and daily guides, and decide whether an occasional ad applies where you live. Your country and units are kept on your phone; for swaps, only the country name is sent with the product category. We never ask for your location. | Legitimate interests (keeping the app free) |
| Apple Health or Health Connect (Android) - only if you tap Connect | To read your workouts - type, start time, length, distance and active calories (for your exercise bonus and to show your workouts next to what you ate) - your latest weight, body fat and height (for your progress), and your sleep (shown on Track, read on your phone and not stored by us). Only if you also turn on "Save my food to Apple Health" (or Health Connect), we write your daily calories and nutrients there, on your phone, so your other health apps can use them. Only if you turn on "Glucose next to meals" (Plus), we read glucose readings that a sensor saves to Health, on your phone, to show the two hours after each meal - they're never stored by us or sent anywhere. You choose exactly what to share in the permission screens and can turn either off at any time in the Health app or Health Connect settings. Health data is never used for advertising or shared with advertisers. | Your explicit consent |
| Photos and requests for AI features (only when you use them): snap or describe a meal, reading a nutrition label, reading the calories on a restaurant menu, importing a recipe from a web link (including one you share in from another app), meal plans, meal ideas from a photo of your fridge or cupboard or from your kitchen list, and questions to the AI coach | To estimate the foods and portions in your meal, read a label, suggest meals or answer your question. The photo or text - and, for meal plans and ideas, your calorie and protein targets, country and the foods you avoid (and, for kitchen ideas, the names of the items on your kitchen list); for the coach, a short summary of your own diary (daily totals, targets, frequent foods, water, sleep and mood, with no name, email, weight or pregnancy status) - is sent to Anthropic (the makers of Claude) for that one request and isn't stored by us or used to train AI models; you check the result before anything is logged. We count how many requests you make each day to keep the service fair. | Your explicit consent (this can reveal information about your health) |
| Buddies (only if you join a group) | To run a weekly challenge with the people you invite. The others in your group see your username, avatar, how many days you met this week's challenge and the cheers you send. They never see your food, weight or calories. Leaving the group removes your progress and cheers. Adults only. | Your consent (joining a group) |
| Pregnancy or breastfeeding (only if you choose it in your plan) | To follow NHS guidance: no weight-loss target, the extra calories the NHS and SACN suggest, and gentle reminders and food checks. It is kept on your phone with the rest of your plan - it isn't sent to us. Change it or turn it off at any time in Plan. | Your explicit consent (this is information about your health) |
| Meal photos (only if you keep them): photos of meals you logged with a photo, and the day, meal and foods for each | To show your meal photo timeline. Photos are kept on your phone. If you turn on backup, they're also stored privately in your account so they move to a new phone - only you can see them. Backups are kept for 90 days on a free account and for as long as you have Plus; on your phone they stay until you delete them. Turn backup off or delete a photo at any time. | Your explicit consent (this can reveal information about your health) |
| Product label fingerprints (when you're signed in and open a product): the label details we compare - ingredients, allergens, "may contain" traces, additives, sugar, salt, saturated fat, calories per 100g and our score - and which account saw that version | So we can tell you if something you buy changes, like a new allergen or a recipe change. We keep which account saw each version only to count how many people have seen it, so a change can show as confirmed rather than "reported". Nobody else can see who saw what, and nothing about your diary or shopping list is stored here. It's deleted if you delete your account. | Legitimate interests (keeping product information accurate and safe) |
| Nutrition Counts Plus (optional subscription) | To give you the Plus features. Every new account gets Plus free for its first 14 days - no card and nothing to cancel: we record when your 14 days started (one per account) and remind you two days before they end. If you then choose to subscribe, payments are handled by Apple or Google - we never see your card details. Plus settings like your personal filters stay on your phone. | Contract (providing the subscription you chose) |
| Support messages | To answer your questions. | Legitimate interests |
On your phone only
Reminders you set up are scheduled on your phone - nothing is sent from our servers. Scanning a barcode happens on your phone, and those images never leave it. Photos you take for an AI feature are covered above.
Ads
The app is free. To keep it that way we may show you an occasional, clearly labelled ad - at most once a week, and never in your first week. Ads are only shown to adults, are based only on your country (never your diary, measurements or health data), and never appear on a food's score. We don't use advertising networks, we don't track you across other apps or websites, and nothing we promote ever changes a score. If you buy something through an ad, we may earn a commission.
The launch waitlist
If you join the waitlist on our website, we store your email address, the date you joined and the wording you agreed to. We use it only to tell you when the app launches and to send the occasional early update - never for anything else, and we never share it for others' marketing. Our legal basis is your consent.
Every email includes a way to unsubscribe, or you can email privacy@nutritioncounts.com and we'll remove you. We delete waitlist addresses 12 months after launch unless you've created an account. The list is stored with Supabase in their Ireland (EU) region.
Testimonials
If we ask you for a testimonial and you send one through our website, we store your name, email address, town (if you give it), your words, your answers about how you know us, how you've used the app and anything you've been given, and the permission wording you agreed to, with the date. We keep this as a record that your testimonial is genuine and that you agreed to it being published as you chose. Our legal basis is your consent. We use your email only to contact you about your testimonial.
You can ask us to stop using your testimonial at any time by emailing privacy@nutritioncounts.com; we remove it from our website and channels and keep only a short note that it was withdrawn. We keep the record for as long as we use the testimonial and for two years after. It's stored with Supabase in their Ireland (EU) region.
Who we share with
We don't sell your personal data. We use a small number of trusted providers to run the app:
- Supabase - our database and sign-in provider. Your account data is stored in their Ireland (EU) region.
- Vercel - hosts our website and the small server that provides ad settings.
- Expo - delivers app updates to your phone.
- Resend - sends your sign-in codes and trial reminders (from their Ireland (EU) region).
- Anthropic - analyses photos and requests when you use an AI feature (snap or describe a meal, read a label or a menu, import a recipe, meal plans and fridge ideas, and the AI coach). Under Anthropic's commercial terms, what we send isn't used to train their models.
- Apple and Google - only if you choose Sign in with Apple or Sign in with Google: they confirm it's you and share your email address with us. If you delete your account, we also ask Apple to disconnect Sign in with Apple.
- RevenueCat - manages Plus subscriptions bought through the App Store or Google Play: it receives your account ID and your purchase history (not your card details, health data or diary).
These providers act on our instructions under data processing agreements. Our main data stores are in the EU, which UK law recognises as giving adequate protection. Where a provider processes data elsewhere (for example in the United States), we rely on UK-approved safeguards such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement.
Open Food Facts is an independent, non-profit food database. When you scan a product we don't yet have, the barcode is sent to Open Food Facts to look it up. We don't send them your account details.
We may also share information if the law requires it, or to protect the safety of our users.
How long we keep it
- Your account data is kept until you delete your account.
- When you delete something, we keep a short record that it was deleted for up to 90 days, so the deletion reaches all your phones.
- When you delete your account, your personal data is deleted straight away. Routine backups are overwritten within 30 days. Products you added stay in the shared database, without your name.
Children
You must be at least 13 to create an account. If you're under 18, your profile is kept private (you won't appear on leaderboards) and you won't see any ads. We follow the ICO's Age Appropriate Design Code.
Your rights
You have the right to:
- access the personal data we hold about you, and get a copy (use "Export my data" in the app, or ask us);
- have inaccurate data corrected;
- have your data deleted (use "Delete my account" in the app, or email us from your account's address if you no longer have the app);
- withdraw your consent at any time, which you can do by deleting the relevant data or your account;
- object to, or ask us to restrict, how we use your data;
- move your data to another service (data portability).
To use any of these rights, email privacy@nutritioncounts.com. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.
If you live in the United States
Some US states have laws about "consumer health data" - for example Washington's My Health My Data Act, and similar laws in Nevada and Connecticut. Your plan, body measurements, food diary, exercise and Apple Health or Health Connect information may count as consumer health data. This section is our consumer health data privacy policy.
- What we collect and why: the information in the "Plan", "Food diary" and "Apple Health or Health Connect" rows above, only to provide the features you use (your targets, tracking and progress).
- Where it comes from: you, and Apple Health or Health Connect if you connect it.
- Consent: we only collect it after you agree when you create your account, and only read from (or write to) Apple Health or Health Connect after you allow it in the permission screen.
- Sharing: we don't sell it and don't share it with third parties. It's processed only by the providers listed in "Who we share with", on our instructions.
- Your rights: you can see it, export it and delete it at any time in the app, withdraw your consent by deleting it or your account, or email privacy@nutritioncounts.com. If we turn down a request you can appeal by replying to our answer; if you're still unhappy you can contact your state Attorney General.
We don't sell personal information or share it for targeted advertising, and we don't use sensitive personal information for anything beyond providing the app. You must be at least 13 to create an account.
Security
Your data is encrypted in transit and at rest. Each person's data is protected by database rules so only they can read it, and sign-in uses one-time email codes, Sign in with Apple or Sign in with Google rather than passwords.
Changes to this notice
If we make important changes, we'll tell you in the app before they take effect. The date at the top shows when this notice was last updated.